1"use strict";(globalThis.webpackChunkdocs=globalThis.webpackChunkdocs||[]).push([[1749],{28e3(e,t,i){i.r(t),i.d(t,{assets:()=>E,contentTitle:()=>h,default:()=>L,frontMatter:()=>A,metadata:()=>a,toc:()=>g});const a=JSON.parse('{"id":"OpenAPI-clients/policy/dynamicvaluemapping/policy-dynamicvaluemapping-dynamic-value-mapping-service-create-dynamic-value-mapping","title":"CreateDynamicValueMapping","description":"CreateDynamicValueMapping","source":"@site/docs/OpenAPI-clients/policy/dynamicvaluemapping/policy-dynamicvaluemapping-dynamic-value-mapping-service-create-dynamic-value-mapping.api.mdx","sourceDirName":"OpenAPI-clients/policy/dynamicvaluemapping","slug":"/OpenAPI-clients/policy/dynamicvaluemapping/policy-dynamicvaluemapping-dynamic-value-mapping-service-create-dynamic-value-mapping","permalink":"/OpenAPI-clients/policy/dynamicvaluemapping/policy-dynamicvaluemapping-dynamic-value-mapping-service-create-dynamic-value-mapping","draft":false,"unlisted":false,"editUrl":null,"tags":[],"version":"current","lastUpdatedAt":null,"frontMatter":{"id":"policy-dynamicvaluemapping-dynamic-value-mapping-service-create-dynamic-value-mapping","title":"CreateDynamicValueMapping","description":"CreateDynamicValueMapping","sidebar_label":"CreateDynamicValueMapping","hide_title":true,"hide_table_of_contents":true,"api":"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","sidebar_class_name":"post api-method","info_path":"policy-dynamicvaluemapping","custom_edit_url":null},"sidebar":"tutorialSidebar","previous":{"title":"policy.dynamicvaluemapping","permalink":"/OpenAPI-clients/policy/dynamicvaluemapping/"},"next":{"title":"DeleteDynamicValueMapping","permalink":"/OpenAPI-clients/policy/dynamicvaluemapping/policy-dynamicvaluemapping-dynamic-value-mapping-service-delete-dynamic-value-mapping"}}');var r=i(74848),s=i(28453),n=i(80811),o=i.n(n),p=i(6801),d=i.n(p),l=i(12939),c=i.n(l),y=i(71621),_=i.n(y),m=(i(71156),i(7227),i(85225)),u=i(23230);const A={id:"policy-dynamicvaluemapping-dynamic-value-mapping-service-create-dynamic-value-mapping",title:"CreateDynamicValueMapping",description:"CreateDynamicValueMapping",sidebar_label:"CreateDynamicValueMapping",hide_title:!0,hide_table_of_contents:!0,api:"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",sidebar_class_name:"post api-method",info_path:"policy-dynamicvaluemapping",custom_edit_url:null},h=void 0,E={},g=[];function b(e){const t={p:"p",...(0,s.R)(),...e.components};return(0,r.jsxs)(r.Fragment,{children:[(0,r.jsx)(m.default,{as:"h1",className:"openapi__heading",children:"CreateDynamicValueMapping"}),"\n",(0,r.jsx)(o(),{method:"post",path:"/policy.dynamicvaluemapping.DynamicValueMappingService/CreateDynamicValueMapping",context:"endpoint"}),"\n",(0,r.jsx)(t.p,{children:"CreateDynamicValueMapping"}),"\n",(0,r.jsx)(m.default,{id:"request",as:"h2",className:"openapi-tabs__heading",children:(0,r.jsx)(u.default,{id:"theme.openapi.request.title",children:"Request"})}),"\n",(0,r.jsx)(d(),{...i(82962)}),"\n",(0,r.jsx)(c(),{...i(74136)}),"\n",(0,r.jsx)(_(),{...i(58802)})]})}function L(e={}){const{wrapper:t}={...(0,s.R)(),...e.components};return t?(0,r.jsx)(t,{...e,children:(0,r.jsx)(b,{...e})}):b(e)}},82962(e){e.exports=JSON.parse('{"parameters":[{"name":"Connect-Protocol-Version","in":"header","required":true,"schema":{"type":"number","title":"Connect-Protocol-Version","enum":[1],"description":"Define the version of the Connect protocol","const":1}},{"name":"Connect-Timeout-Ms","in":"header","schema":{"type":"number","title":"Connect-Timeout-Ms","description":"Define the timeout, in ms"}}]}')},74136(e){e.exports=JSON.parse('{"title":"Body","body":{"content":{"application/json":{"schema":{"type":"object","properties":{"attributeDefinitionId":{"type":"string","title":"attribute_definition_id","format":"uuid"},"attributeDefinitionFqn":{"type":"string","title":"attribute_definition_fqn","minLength":1,"format":"uri"},"valueResolver":{"title":"value_resolver","description":"Required: the dynamic resolver comparing entity selector result to the resource value segment","type":"object","properties":{"subjectExternalSelectorValue":{"type":"string","title":"subject_external_selector_value","description":"a selector for a field value on a flattened Entity Representation (such as from\\n idP/LDAP), e.g. \\".patientAssignments[]\\""},"operator":{"not":{"enum":[2]},"title":"operator","description":"how the requested resource value segment is compared against each value the selector\\n resolves from the entity representation. NOT_IN is unsupported because dynamic resolution\\n is existential over the resolved entity values. IN_CONTAINS is substring-based and\\n over-matches by design (e.g. \\"admin\\" matches \\"superadmin\\", \\"admin-readonly\\"); prefer IN\\n unless substring matching is genuinely intended.","type":"string","enum":["SUBJECT_MAPPING_OPERATOR_ENUM_UNSPECIFIED","SUBJECT_MAPPING_OPERATOR_ENUM_IN","SUBJECT_MAPPING_OPERATOR_ENUM_NOT_IN","SUBJECT_MAPPING_OPERATOR_ENUM_IN_CONTAINS"]}},"required":["subjectExternalSelectorValue","operator"],"additionalProperties":false},"actions":{"type":"array","items":{"type":"object","oneOf":[{"properties":{"custom"
1:{"type":"string","title":"custom","description":"Deprecated"}},"title":"custom","required":["custom"]},{"properties":{"standard":{"title":"standard","description":"Deprecated","type":"string","enum":["STANDARD_ACTION_UNSPECIFIED","STANDARD_ACTION_DECRYPT","STANDARD_ACTION_TRANSMIT"]}},"title":"standard","required":["standard"]}],"properties":{"id":{"type":"string","title":"id","description":"Generated uuid in database"},"name":{"type":"string","title":"name"},"namespace":{"title":"namespace","description":"Namespace context for this action","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KA
1S"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"Action","additionalProperties":false,"description":"An action an entity can take"},"title":"actions","minItems":1,"description":"Required: actions permitted on a matched value\\nAction name or ID must not be empty if provided:\\n```\\nthis.all(item, item.name != \'\' || item.id != \'\')\\n```\\n\\n"},"existingSubjectConditionSetId":{"type":"string","title":"existing_subject_condition_set_id","description":"Optional static pre-gate. Reuse an existing SubjectConditionSet (prioritized) ...\\nOptional field must be a valid UUID:\\n```\\nsize(this) == 0 || this.matches(\'[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}\')\\n```\\n\\n"},"newSubjectConditionSet":{"title":"new_subject_condition_set","description":"... or create a new one (ignored if existing_subject_condition_set_id is provided)","type":"object","properties":{"subjectSets":{"type":"array","items":{"type":"object","properties":{"conditionGroups":{"type":"array","items":{"type":"object","properties":{"conditions":{"type":"array","items":{"type":"object","properties":{"subjectExternalSelectorValue":{"type":"string","title":"subject_external_selector_value","description":"a selector for a field value on a flattened Entity Representation (such as\\n from idP/LDAP)"},"operator":{"title":"operator","description":"the evaluation operator of relation","type":"string","enum":["SUBJECT_MAPPING_OPERATOR_ENUM_UNSPECIFIED","SUBJECT_MAPPING_OPERATOR_ENUM_IN","SUBJECT_MAPPING_OPERATOR_ENUM_NOT_IN","SUBJECT_MAPPING_OPERATOR_ENUM_IN_CONTAINS"]},"subjectExternalValues":{"type":"array","items":{"type":"string","minItems":1},"title":"subject_external_values","minItems":1,"description":"list of comparison values for the result of applying the\\n subject_external_selector_value on a flattened Entity Representation\\n (Subject), evaluated by the operator"}},"title":"Condition","required":["subjectExternalSelectorValue","operator"],"additionalProperties":false,"description":"*\\nA Condition defines a rule of <the value at the flattened \'selector value\'\\nlocation> <operator>
1 <subject external values>"},"title":"conditions","minItems":1},"booleanOperator":{"title":"boolean_operator","description":"the boolean evaluation type across the conditions","type":"string","enum":["CONDITION_BOOLEAN_TYPE_ENUM_UNSPECIFIED","CONDITION_BOOLEAN_TYPE_ENUM_AND","CONDITION_BOOLEAN_TYPE_ENUM_OR"]}},"title":"ConditionGroup","required":["booleanOperator"],"additionalProperties":false,"description":"A collection of Conditions evaluated by the boolean_operator provided"},"title":"condition_groups","minItems":1,"description":"multiple Condition Groups are evaluated with AND logic"}},"title":"SubjectSet","additionalProperties":false,"description":"A collection of Condition Groups"},"title":"subject_sets","minItems":1,"description":"Required"},"metadata":{"title":"metadata","description":"Optional\\n Common metadata","type":"object","properties":{"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional labels"}},"additionalProperties":false}},"additionalProperties":false},"namespaceId":{"type":"string","title":"namespace_id","format":"uuid","description":"Optional: namespace ID or FQN for the mapping"},"namespaceFqn":{"type":"string","title":"namespace_fqn","minLength":1,"format":"uri"},"metadata":{"title":"metadata","description":"Optional","type":"object","properties":{"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional labels"}},"additionalProperties":false}},"title":"CreateDynamicValueMappingRequest","required":["valueResolver"],"additionalProperties":false}}},"required":true}}')},58802(e){e.exports=JSON.parse('{"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object","properties":{"dynamicValueMapping":{"type":"object","properties":{"id":{"type":"string","title":"id"},"attributeDefinition":{"title":"attribute_definition","description":"the Attribute Definition whose values are entitled dynamically","type":"object","properties":{"id":{"type":"string","title":"id"},"namespace":{"title":"namespace","description":"namespace of the attribute","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false}
1,"name":{"type":"string","title":"name","description":"attribute name"},"rule":{"title":"rule","description":"attribute rule enum","type":"string","enum":["ATTRIBUTE_RULE_TYPE_ENUM_UNSPECIFIED","ATTRIBUTE_RULE_TYPE_ENUM_ALL_OF","ATTRIBUTE_RULE_TYPE_ENUM_ANY_OF","ATTRIBUTE_RULE_TYPE_ENUM_HIERARCHY"]},"values":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"attribute":{"title":"attribute","type":"object","properties":"circular()","required":["rule"],"additionalProperties":false},"value":{"type":"string","title":"value"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KA
1S"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the value. Use kas_keys instead."},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"subjectMappings":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"attributeValue":{"title":"attribute_value","description":"the Attribute Value mapped to; aka: \\"The Entity Entitlement Attribute\\"","type":"object","properties":"circular()","additionalProperties":false},"subjectConditionSet":{"title":"subject_condition_set","description":"the reusable SubjectConditionSet mapped to the given Attribute Value","type":"object","properties":{"id":{"type":"string","title":"id"},"namespace":{"title":"namespace","description":"the namespace containing this subject condition set\\n possible this is empty in the case a subject condition set\\n has not been migrated to a namespace.","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"subjectSets":{"type":"array","items":{"type":"object","properties":{"conditionGroups":{"type":"array","items":{"type":"object","properties":{"conditions":{"type":"array","items":{"type":"object","properties":{"subjectExternalSelectorValue":{"type":"string","title":"subject_external_selector_value","description":"a selector for a field value on a flattened Entity Representation (such as\\n from idP/LDAP)"},"operator":{"title":"operator","description":"the evaluation operator of relation","type":"string","enum":["SUBJECT_MAPPING_OPERATOR_ENUM_UNSPECIFIED","SUBJECT_MAPPING_OPERATOR_ENUM_IN","SUBJECT_MAPPING_OPERATOR_ENUM_NOT_IN","SUBJECT_MAPPING_OPERATOR_ENUM_IN_CONTAINS"]},"subjectExternalValues":{"type":"array","items":{"type":"string","minItems":1},"title":"subject_external_values","minItems":1,"description":"list of comparison values for the result of applying the\\n subject_external_selector_value on a flattened Entity Representation\\n (Subject), evaluated by the operator"}},"title":"Condition","required":["subjectExternalSelectorValue","operator"],"additionalProperties":false,"description":"*\\nA Condition defines a rule of <the value at the flattened \'selector value\'\\nlocation> <operator>
1 <subject external values>"},"title":"conditions","minItems":1},"booleanOperator":{"title":"boolean_operator","description":"the boolean evaluation type across the conditions","type":"string","enum":["CONDITION_BOOLEAN_TYPE_ENUM_UNSPECIFIED","CONDITION_BOOLEAN_TYPE_ENUM_AND","CONDITION_BOOLEAN_TYPE_ENUM_OR"]}},"title":"ConditionGroup","required":["booleanOperator"],"additionalProperties":false,"description":"A collection of Conditions evaluated by the boolean_operator provided"},"title":"condition_groups","minItems":1,"description":"multiple Condition Groups are evaluated with AND logic"}},"title":"SubjectSet","additionalProperties":false,"description":"A collection of Condition Groups"},"title":"subject_sets","minItems":1},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"additionalProperties":false},"actions":{"type":"array","items":{"type":"object","oneOf":[{"properties":{"custom":{"type":"string","title":"custom","description":"Deprecated"}},"title":"custom","required":["custom"]},{"properties":{"standard":{"title":"standard","description":"Deprecated","type":"string","enum":["STANDARD_ACTION_UNSPECIFIED","STANDARD_ACTION_DECRYPT","STANDARD_ACTION_TRANSMIT"]}},"title":"standard","required":["standard"]}],"properties":{"id":{"type":"string","title":"id","description":"Generated uuid in database"},"name":{"type":"string","title":"name"},"namespace":{"title":"namespace","description":"Namespace context for this action","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"Action","additionalProperties":false,"description":"An action an entity can take"},"title":"actions","description":"The actions permitted by subjects in this mapping"},"namespace":{"title":"namespace","description":"the namespace containing this subject mapping\\n possible this is empty. If so that means\\n the Subject Mapping has not been migrated to a namespace.","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"SubjectMapping","additionalProperties":false,"description":"Subject Mapping: A Policy assigning Subject Set(s) to a permitted attribute\\nvalue + action(s) combination"}
1,"title":"subject_mappings","description":"subject mapping"},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys"},"resourceMappings":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"attributeValue":{"title":"attribute_value","type":"object","properties":"circular()","additionalProperties":false},"terms":{"type":"array","items":{"type":"string"},"title":"terms"},"group":{"title":"group","type":"object","properties":{"id":{"type":"string","title":"id"},"namespaceId":{"type":"string","title":"namespace_id","description":"the namespace containing the group of resource mappings"},"name":{"type":"string","title":"name","description":"the common name for the group of resource mappings, which must be unique\\n per namespace"},"fqn":{"type":"string","title":"fqn","description":"the fully qualified name of the resource mapping group"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"required":["namespaceId","name"],"additionalProperties":false,"description":"Resource Mapping Groups are namespaced collections of Resource Mappings\\nassociated under a common group name."},"namespace":{"title":"namespace","description":"The namespace that optionally owns this resource mapping. When the mapping\\n belongs to a group, this matches the group\'s namespace. The mapped\\n attribute value may belong to a different namespace.","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false}},"title":"ResourceMapping","required":["attributeValue"],"additionalProperties":false,"description":"Resource Mappings (aka Access Control Resource Encodings aka ACRE) are\\nstructures supporting the mapping of Resources and Attribute Values"},"title":"resource_mappings"},"obligations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"namespace":{"title":"namespace","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false}
1,"name":{"type":"string","title":"name"},"values":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"obligation":{"title":"obligation","type":"object","properties":"circular()","additionalProperties":false},"value":{"type":"string","title":"value"},"triggers":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"obligationValue":{"title":"obligation_value","type":"object","properties":"circular()","additionalProperties":false},"action":{"type":"object","oneOf":[{"properties":{"custom":{"type":"string","title":"custom","description":"Deprecated"}},"title":"custom","required":["custom"]},{"properties":{"standard":{"title":"standard","description":"Deprecated","type":"string","enum":["STANDARD_ACTION_UNSPECIFIED","STANDARD_ACTION_DECRYPT","STANDARD_ACTION_TRANSMIT"]}},"title":"standard","required":["standard"]}],"properties":{"id":{"type":"string","title":"id","description":"Generated uuid in database"},"name":{"type":"string","title":"name"},"namespace":{"title":"namespace","description":"Namespace context for this action","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}}
1,"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"Action","additionalProperties":false,"description":"An action an entity can take"},"attributeValue":{"title":"attribute_value","type":"object","properties":"circular()","additionalProperties":false},"context":{"type":"array","items":{"type":"object","properties":{"pep":{"title":"pep","type":"object","properties":{"clientId":{"type":"string","title":"client_id","minLength":1}},"additionalProperties":false}},"title":"RequestContext","required":["pep"],"additionalProperties":false,"description":"Holds the context needed for obligation fulfillment"},"title":"context"},"namespace":{"title":"namespace","description":"The source namespace for this trigger, derived from the attribute value and action.","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"ObligationTrigger","additionalProperties":false},"title":"triggers"},"fqn":{"type":"string","title":"fqn"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"ObligationValue","additionalProperties":false},"title":"values"},"fqn":{"type":"string","title":"fqn"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"Obligation","additionalProperties":false},"title":"obligations"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"Value","additionalProperties":false},"title":"values"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the attribute. Use kas_keys instead."},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys associated with the attribute"},"allowTraversal":{"title":"allow_traversal","description":"Whether or not we will use the attribute definition during encryption\\n if the attribute value is missing.","type":"boolean"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"required":["rule"],"additionalProperties":false},"valueResolver":{"title":"value_resolver","description":"the dynamic resolver matched against the requested resource value segment","type":"object","properties":{"subjectExternalSelectorValue":{"type":"string","title":"subject_external_selector_value","description":"a selector for a field value on a flattened Entity Representation (such as from\\n idP/LDAP), e.g. \\".patientAssignments[]\\""},"operator":{"not":{"enum":[2]},"title":"operator","description":"how the requested resource value segment is compared against each value the selector\\n resolves from the entity representation. NOT_IN is unsupported because dynamic resolution\\n is existential over the resolved entity values. IN_CONTAINS is substring-based and\\n over-matches by design (e.g. \\"admin\\" matches \\"superadmin\\", \\"admin-readonly\\"); prefer IN\\n unless substring matching is genuinely intended.","type":"string","enum":["SUBJECT_MAPPING_OPERATOR_ENUM_UNSPECIFIED","SUBJECT_MAPPING_OPERATOR_ENUM_IN","SUBJECT_MAPPING_OPERATOR_ENUM_NOT_IN","SUBJECT_MAPPING_OPERATOR_ENUM_IN_CONTAINS"]}},"required":["subjectExternalSelectorValue","operator"],"additionalProperties":false},"subjectConditionSet":{"title":"subject_condition_set","description":"optional static pre-gate on the entity, evaluated with normal SubjectConditionSet\\n semantics (no dynamic overload). When present, both the gate and the resolver must\\n pass for entitlement.","type":"object","properties":{"id":{"type":"string","title":"id"},"namespace":{"title":"namespace","description":"the namespace containing this subject condition set\\n possible this is empty in the case a subject condition set\\n has not been migrated to a namespace.","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"subjectSets":{"type":"array","items":{"type":"object","properties":{"conditionGroups":{"type":"array","items":{"type":"object","properties":{"conditions":{"type":"array","items":{"type":"object","properties":{"subjectExternalSelectorValue":{"type":"string","title":"subject_external_selector_value","description":"a selector for a field value on a flattened Entity Representation (such as\\n from idP/LDAP)"},"operator":{"title":"operator","description":"the evaluation operator of relation","type":"string","enum":["SUBJECT_MAPPING_OPERATOR_ENUM_UNSPECIFIED","SUBJECT_MAPPING_OPERATOR_ENUM_IN","SUBJECT_MAPPING_OPERATOR_ENUM_NOT_IN","SUBJECT_MAPPING_OPERATOR_ENUM_IN_CONTAINS"]},"subjectExternalValues":{"type":"array","items":{"type":"string","minItems":1},"title":"subject_external_values","minItems":1,"description":"list of comparison values for the result of applying the\\n subject_external_selector_value on a flattened Entity Representation\\n (Subject), evaluated by the operator"}},"title":"Condition","required":["subjectExternalSelectorValue","operator"],"additionalProperties":false,"description":"*\\nA Condition defines a rule of <the value at the flattened \'selector value\'\\nlocation> <operator>
1 <subject external values>"},"title":"conditions","minItems":1},"booleanOperator":{"title":"boolean_operator","description":"the boolean evaluation type across the conditions","type":"string","enum":["CONDITION_BOOLEAN_TYPE_ENUM_UNSPECIFIED","CONDITION_BOOLEAN_TYPE_ENUM_AND","CONDITION_BOOLEAN_TYPE_ENUM_OR"]}},"title":"ConditionGroup","required":["booleanOperator"],"additionalProperties":false,"description":"A collection of Conditions evaluated by the boolean_operator provided"},"title":"condition_groups","minItems":1,"description":"multiple Condition Groups are evaluated with AND logic"}},"title":"SubjectSet","additionalProperties":false,"description":"A collection of Condition Groups"},"title":"subject_sets","minItems":1},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"additionalProperties":false},"actions":{"type":"array","items":{"type":"object","oneOf":[{"properties":{"custom":{"type":"string","title":"custom","description":"Deprecated"}},"title":"custom","required":["custom"]},{"properties":{"standard":{"title":"standard","description":"Deprecated","type":"string","enum":["STANDARD_ACTION_UNSPECIFIED","STANDARD_ACTION_DECRYPT","STANDARD_ACTION_TRANSMIT"]}},"title":"standard","required":["standard"]}],"properties":{"id":{"type":"string","title":"id","description":"Generated uuid in database"},"name":{"type":"string","title":"name"},"namespace":{"title":"namespace","description":"Namespace context for this action","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"Action","additionalProperties":false,"description":"An action an entity can take"},"title":"actions","description":"the actions permitted by subjects in this mapping"},"namespace":{"title":"namespace","description":"the namespace containing this mapping","type":"object","properties":{"id":{"type":"string","title":"id","description":"generated uuid in database"},"name":{"type":"string","title":"name","description":"used to partition Attribute Definitions, support by namespace AuthN and\\n enable federation"},"fqn":{"type":"string","title":"fqn"},"active":{"title":"active","description":"active by default until explicitly deactivated","type":"boolean"},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"},"grants":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","title":"id"},"uri":{"type":"string","title":"uri","description":"Address of a KAS instance\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https?://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$\')\\n```\\n\\n"},"publicKey":{"title":"public_key","description":"Deprecated: KAS can have multiple key pairs","type":"object","oneOf":[{"properties":{"cached":{"title":"cached","description":"public key with additional information. Current preferred version","type":"object","properties":{"keys":{"type":"array","items":{"type":"object","properties":{"pem":{"type":"string","title":"pem","maxLength":8192,"minLength":1,"description":"x509 ASN.1 content in PEM envelope, usually"},"kid":{"type":"string","title":"kid","maxLength":32,"minLength":1,"description":"A unique string identifier for this key"},"alg":{"not":{"enum":[0]},"title":"alg","description":"A known algorithm type with any additional parameters encoded.\\n To start, these may be `rsa:2048` for RSA-based wrapping and\\n `ec:secp256r1` for EC-based wrapping, but more formats may be added as
1needed.","type":"string","enum":["KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED","KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048","KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1","KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_XWING","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP256R1_MLKEM768","KAS_PUBLIC_KEY_ALG_ENUM_HPQT_SECP384R1_MLKEM1024","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_768","KAS_PUBLIC_KEY_ALG_ENUM_MLKEM_1024"]}},"title":"KasPublicKey","additionalProperties":false,"description":"Deprecated\\n A KAS public key and some associated metadata for further identifcation"},"title":"keys"}},"additionalProperties":false}},"title":"cached","required":["cached"]},{"properties":{"remote":{"type":"string","title":"remote","description":"kas public key url - optional since can also be retrieved via public key\\nURI must be a valid URL (e.g., \'https://demo.com/\') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:\\n```\\nthis.matches(\'^https://[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?(\\\\\\\\.[a-zA-Z0-9]([a-zA-Z0-9\\\\\\\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$\')\\n```\\n\\n"}},"title":"remote","required":["remote"]}],"additionalProperties":false},"sourceType":{"title":"source_type","description":"The source of the KAS: (INTERNAL, EXTERNAL)","type":"string","enum":["SOURCE_TYPE_UNSPECIFIED","SOURCE_TYPE_INTERNAL","SOURCE_TYPE_EXTERNAL"]},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Kas keys associated with this KAS"},"name":{"type":"string","title":"name","description":"Optional\\n Unique name of the KAS instance"},"metadata":{"title":"metadata","description":"Common metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false}},"title":"KeyAccessServer","additionalProperties":false,"description":"Key Access Server Registry"},"title":"grants","description":"Deprecated KAS grants for the namespace. Use kas_keys instead."},"kasKeys":{"type":"array","items":{"type":"object","properties":{"kasUri":{"type":"string","title":"kas_uri","description":"The URL of the Key Access Server"},"publicKey":{"title":"public_key","description":"The public key of the Key that belongs to the KAS","type":"object","properties":{"algorithm":{"title":"algorithm","type":"string","enum":["ALGORITHM_UNSPECIFIED","ALGORITHM_RSA_2048","ALGORITHM_RSA_4096","ALGORITHM_EC_P256","ALGORITHM_EC_P384","ALGORITHM_EC_P521","ALGORITHM_HPQT_XWING","ALGORITHM_HPQT_SECP256R1_MLKEM768","ALGORITHM_HPQT_SECP384R1_MLKEM1024","ALGORITHM_MLKEM_768","ALGORITHM_MLKEM_1024"],"description":"Supported key algorithms."},"kid":{"type":"string","title":"kid"},"pem":{"type":"string","title":"pem"}},"additionalProperties":false},"kasId":{"type":"string","title":"kas_id","description":"The ID of the Key Access Server"}},"title":"SimpleKasKey","additionalProperties":false},"title":"kas_keys","description":"Keys for the namespace"}},"additionalProperties":false},"metadata":{"title":"metadata","type":"object","properties":{"createdAt":{"title":"created_at","description":"created_at set by server (entity who created will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"updatedAt":{"title":"updated_at","description":"updated_at set by server (entity who updated will recorded in an audit event)","type":"string","examples":["1s","1.000340012s"],"format":"date-time"},"labels":{"type":"object","title":"labels","additionalProperties":{"type":"string","title":"value"},"description":"optional short description"}},"additionalProperties":false,"description":"Struct to uniquely identify a resource with optional additional metadata"}},"title":"DynamicValueMapping","additionalProperties":false,"description":"Dynamic Value Mapping: a Policy assigning permitted action(s) to\\ndynamically-requested values under an Attribute Definition. It raises entitlement\\nauthority from a concrete Attribute Value to the Attribute Definition: at decision time\\nthe value_resolver compares the requested resource value segment against the entity\\nrepresentation, avoiding pre-provisioning a value + subject mapping per discrete value.\\n\\nCombination semantics: multiple dynamic value mappings on the same definition are OR-ed (any\\nmatch entitles); within a mapping, the optional subject_condition_set\'s subject sets are AND-ed\\n(every set must pass), matching subject mapping evaluation.\\n\\nCoexistence: a definition with a dynamic value mapping cannot also carry value-level subject\\nmappings, and values under such a definition cannot be added to a registered resource\'s action\\nattribute values (those values resolve at decision time, so they are not meaningful as static\\nregistered-resource entitlements)."}},"title":"CreateDynamicValueMappingResponse","additionalProperties":false}}}},"default":{"description":"Error","content":{"application/json":{"schema":{"type":"object","properties":{"code":{"type":"string","examples":["not_found"],"enum":["canceled","unknown","invali
1d_argument","deadline_exceeded","not_found","already_exists","permission_denied","resource_exhausted","failed_precondition","aborted","out_of_range","unimplemented","internal","unavailable","data_loss","unauthenticated"],"description":"The status code, which should be an enum value of [google.rpc.Code][google.rpc.Code]."},"message":{"type":"string","description":"A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the [google.rpc.Status.details][google.rpc.Status.details] field, or localized by the client."},"detail":{"type":"object","properties":{"type":{"type":"string"},"value":{"type":"string","format":"binary"},"debug":{"type":"object","additionalProperties":true}},"additionalProperties":true,"description":"Contains an arbitrary serialized message along with a @type that describes the type of the serialized message.","title":"google.protobuf.Any"}},"title":"Connect Error","additionalProperties":true,"description":"Error type returned by Connect: https://connectrpc.com/docs/go/errors/#http-representation"}}}}}}')}}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.